At tokyo404, your privacy is not merely a legal obligation — it is a responsibility we take seriously every day. This document clearly explains what information we collect, why it is collected, how it is used and protected, and your rights as a member of our platform in Malaysia.
This Privacy Policy applies to all personal information collected by tokyo404 from members who register and use our platform in Malaysia. By creating an account or using any tokyo404 service, you consent to the collection and use of your information as described in this document. We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) in all aspects of how we handle user data.
All personal data and financial information you submit to tokyo404 is protected with 256-bit SSL encryption — the same security standard used by major banks in Malaysia. Data transmitted between your device and our servers is fully encrypted and cannot be read by any unauthorised party.
Tokyo404 has never sold, rented, or transferred members' personal data to any external company or third-party marketing outfit, and never will. The information you provide exists solely for the purpose of managing your account and improving our services — it is not a product to be traded with outside parties.
All of tokyo404's data handling practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA). This means you have legally protected rights — including the right to access, correct and delete your personal information stored by us on the tokyo404 platform.
Tokyo404 does not store your credit card details, bank account information or digital wallet account numbers in our systems. All transactions via Touch 'n Go eWallet, DuitNow, GrabPay, Boost, ShopeePay or FPX are processed through PCI-DSS certified third-party payment gateways — the highest security standard in the global payments industry.
Within tokyo404 itself, only staff with a specific operational need are permitted to access members' personal data — and every access is logged and monitored. No staff member may access sensitive member information without the appropriate level of approval. This is an internal layer of protection that we maintain as a matter of daily practice.
The tokyo404 Privacy Policy is reviewed on a regular basis to ensure it accurately reflects our current practices and keeps pace with developments in data protection law in Malaysia. Where significant changes are made, we will notify all members by email or via an in-platform notice before those changes take effect.
We wrote this document in plain, easy-to-understand language so that every member in Malaysia knows exactly how their data is handled.
Tokyo404 collects your personal information in a number of situations when you interact with our platform. The type of information collected depends on how you use our services:
During Account Registration:
During the KYC (Know Your Customer) Verification Process:
Automatically During Platform Use:
Tokyo404 collects only the information that is genuinely necessary to deliver our services safely and to meet our applicable legal obligations. We do not request irrelevant information and do not retain information longer than necessary.
Personal information collected by tokyo404 is used solely for the following purposes:
Tokyo404 does not use your information for any third-party marketing purposes, does not sell it to advertisers, and does not use it to build profiles unrelated to your use of our platform.
Tokyo404 takes a multi-layered approach to protecting your personal data. This isn't just a single mechanism — it's a comprehensive defence system that operates simultaneously to keep your data secure:
Even with all the security measures we have in place, it's important that you also play your part in protecting your account — keep your password secure, never share your login details with anyone, and contact us immediately if you notice any suspicious activity on your tokyo404 account.
If you notice any unauthorised access to your tokyo404 account or receive suspicious emails or messages claiming to be from tokyo404, contact us immediately via in-platform live chat or at support@tokyo404.best. Change your password right away and enable 2FA if you have not already done so. Our security team is ready to respond swiftly.
Tokyo404 does not sell, rent or transfer members' personal data to any third party for marketing or commercial purposes. However, there are limited circumstances where certain information must be shared with other parties as part of legitimate platform operations:
| Third-Party Type | Data Shared | Purpose | For Marketing Purposes? |
|---|---|---|---|
| Payment Gateway | Transaction information only | Deposit/withdrawal processing | No |
| Hosting Provider | Server technical data | Infrastructure operations | No |
| Authorities | Only what is requested | Legal Compliance | No |
| Advertisers / Marketers | None | Not applicable | Never |
In all permitted sharing arrangements, tokyo404 ensures that the receiving party is subject to data protection obligations equivalent to or greater than those we uphold ourselves.
The tokyo404 platform uses cookies and similar tracking technologies to enhance your experience and ensure the platform functions correctly. The following are the types of cookies we use:
You can set your web browser to reject or delete cookies at any time through your browser settings. Please note, however, that disabling session cookies may affect core functionality on the tokyo404 platform — you may be unable to log in or play normally.
Tokyo404 does not use cross-site tracking cookies that follow your activity outside our platform.
Tokyo404 retains your personal data for as long as your account is active, and for the required period thereafter to meet our legal and operational obligations:
Once a retention period expires, data is securely deleted using methods that ensure it cannot be recovered. For data stored in digital formats, we apply data erasure methods that comply with industry security standards.
You may request deletion of your personal data by emailing us at support@tokyo404.best with the subject line "Data Deletion Request". Please note that some data may not be eligible for deletion if it is required for ongoing legal compliance. In such cases, we will inform you of which data cannot be deleted and the reasons why.
As a tokyo404 member and as an individual protected under Malaysia's Personal Data Protection Act 2010 (PDPA), you have the following rights regarding your personal data:
To exercise any of the rights above, contact our privacy team at support@tokyo404.best with the subject line "PDPA Privacy Rights Request – [Request Type]". We will acknowledge receipt of your request within 3 business days and resolve it within the timeframe required by law.
Tokyo404 reserves the right to update or amend this Privacy Policy at any time when necessary — for example, in response to changes in Malaysian data protection law, changes in how we handle data, or the addition of new services to the platform that involve different data processing activities.
When significant changes are made to this Privacy Policy, we will notify all tokyo404 members via:
Your continued use of the tokyo404 platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes made, you have the right to close your account and request deletion of your associated data.
The last updated date of this Privacy Policy is January 2026. We encourage you to check this page periodically to stay informed of tokyo404's latest privacy practices.
If you have any questions, concerns, or complaints about how tokyo404 handles your personal data, or if you wish to exercise any of the privacy rights outlined in Section 7, here is how to reach us:
When submitting a request related to your privacy rights, please include your tokyo404 account number and a clear description of your request so we can process and resolve it as quickly and accurately as possible.
For formal complaints regarding PDPA compliance that cannot be resolved through our own channels, you may contact the Department of Personal Data Protection Malaysia via the relevant authority's official website.
Six core rights you hold over your personal data on our platform. These aren't just promises — they are your legal rights.
You can ask at any time: "What data does tokyo404 hold about me?" — and we are obliged to tell you. Request a copy of your data via our support email and we will process it within the timeframe stipulated under PDPA.
Changed your phone number? New email address? Outdated details in your tokyo404 account? You have the right to request a correction, and we will update it promptly — no lengthy arguments or drawn-out processes required.
Where permitted by law, you may request the deletion of your personal data from tokyo404's systems. We will be transparent about which data can be deleted and which must be retained for legal reasons.
Don't want to receive promotional emails or bonus offers from tokyo404? Unsubscribe via the link in any of our emails or contact support. Your preference will be updated and honoured immediately — important account notices will still be sent regardless.
Where we process your data based on your consent, you may withdraw that consent at any time. This will not affect any processing that took place before the withdrawal, and we will act on your decision promptly.
If you feel that tokyo404 has not complied with the PDPA or that your privacy rights have been violated and we have failed to resolve the matter to your satisfaction, you have the right to lodge a formal complaint with the Department of Personal Data Protection Malaysia through their official channels.
In online betting, trust is everything. Malaysian players who choose to register and deposit at tokyo404 are placing their trust in us — and we don't take that lightly. Every time you enter your phone number for an OTP, make a deposit via Touch 'n Go eWallet or DuitNow, or submit a copy of your IC for KYC, you are entrusting us with deeply personal information.
Tokyo404 understands that trust must be earned through concrete, consistent action — not just words on a page. That is why we invest in robust security infrastructure, maintain a strict no-data-selling policy, and ensure that team members who handle member data are properly trained and supervised.
We also recognise that Malaysian players are becoming increasingly digitally aware and more conscious of their privacy rights — especially following several high-profile data breach cases in the country. tokyo404 aims to demonstrate that a betting platform can operate to the highest privacy standards without compromising a smooth user experience.
On a practical level, keeping your data secure at tokyo404 also means your account is far harder for unauthorised parties to access — protecting your winnings, your balance, and your betting records from any form of tampering. Data security and account security are two sides of the same coin.
One of the most common questions from new tokyo404 members is: "Is it safe to deposit via Touch 'n Go eWallet or DuitNow? Can tokyo404 see my account details?"
The short answer: No. tokyo404 does not view or store your payment account details. When you click "Deposit" and select TNG eWallet, DuitNow or any other method, you are redirected to or interact with an interface operated by a certified third-party payment gateway provider. tokyo404 only receives confirmation that a transaction was successful — not the account details you used to complete it.
This is by design. We have no interest in holding on to sensitive payment information longer than necessary — because data that is never stored cannot be stolen. This "data minimisation" principle is a core part of the privacy-by-design approach that tokyo404 follows.
What we retain in our systems are transaction records only — the amount, date, method (TNG/DuitNow/GrabPay, etc.) and status (successful/failed). This is the minimum information required for account management, dispute resolution and compliance with applicable financial regulations.
Protecting your data is our responsibility. Protecting your financial wellbeing is a shared one — we provide the tools, you make the call.
Enable two-factor authentication (2FA) for an extra layer of security on your tokyo404 account — so even if your password is compromised, your account remains protected.
Set your own daily or weekly deposit limits on tokyo404. This safeguards your finances and ensures gambling remains a form of controlled entertainment.
Tokyo404's self-exclusion feature lets you close access to your account for a period of your choice — no questions asked, effective immediately upon request.
All tokyo404 services are intended for adults aged 18 and above. Age verification is carried out at registration and again during the KYC withdrawal process.
The most frequently asked questions from members about how tokyo404 handles their personal data.